Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242491	4.3	警告	Nimish Pachapurkar Moodle	-	Moodle およびその他の製品で使用される Spike PHPCoverage library におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4280	2012-07-18 17:45	2011-03-1	Show	GitHub Exploit DB Packet Storm

242492	5	警告	Moodle	-	Moodle における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-4279	2012-07-18 17:43	2011-03-1	Show	GitHub Exploit DB Packet Storm

242493	4.3	警告	Moodle	-	Moodle のタグのオートコンプリート機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4278	2012-07-18 17:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

242494	6.8	警告	Moodle	-	Moodle におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-4133	2012-07-18 17:27	2011-03-1	Show	GitHub Exploit DB Packet Storm

242495	6.5	警告	DELL EMC (旧 EMC Corporation)	-	EMC Celerra Network Server、EMC VNX、および EMC VNXe におけるファイルを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2282	2012-07-18 16:45	2012-07-16	Show	GitHub Exploit DB Packet Storm

242496	5	警告	ジョンソンコントロールズ	-	Johnson Controls Pegasys P2000 サーバにおける不正なアラートを生成される脆弱性	CWE-20 不適切な入力確認	CVE-2012-4026	2012-07-18 16:45	2012-07-16	Show	GitHub Exploit DB Packet Storm

242497	7.5	危険	ジョンソンコントロールズ	-	Johnson Controls CK721-A コントローラのファームウェアにおける任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-2607	2012-07-18 16:37	2012-07-16	Show	GitHub Exploit DB Packet Storm

242498	5	警告	Tridium	-	Tridium Niagara AX Framework におけるディレクトリトラバーサルの脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4027	2012-07-18 11:49	2012-07-13	Show	GitHub Exploit DB Packet Storm

242499	4.3	警告	ヒューレット・パッカード	-	HP AssetManager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2021	2012-07-18 11:39	2012-07-12	Show	GitHub Exploit DB Packet Storm

242500	5	警告	RSAセキュリティ	-	EMC RSA Authentication Manager および RSA SecurID Appliance における任意の Web スクリプトを挿入される脆弱性	CWE-Other その他	CVE-2012-2280	2012-07-18 10:58	2012-07-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266291	4.3	MEDIUM Adjacent	nutspace	nut_mobile	The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attribute.	CWE-287 Improper Authentication	CVE-2016-6549	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266292	9.8	CRITICAL Network	nutspace	nut_mobile	The Zizai Tech Nut mobile app makes requests via HTTP instead of HTTPS. These requests contain the user's authenticated session token with the URL. An attacker can capture these requests and reuse th…	CWE-200 Information Exposure	CVE-2016-6548	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266293	7.8	HIGH Local	nutspace	nut_mobile	The Zizai Tech Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file.	CWE-255 CWE-200 Credentials Management Information Exposure	CVE-2016-6547	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266294	7.8	HIGH Local	kkmcn	itrackeasy	The iTrack Easy mobile application stores the account password used to authenticate to the cloud API in base64-encoding in the cache.db file. The base64 encoding format is considered equivalent to cl…	CWE-255 CWE-200 Credentials Management Information Exposure	CVE-2016-6546	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266295	9.8	CRITICAL Network	ieasytec	itrackeasy	Session cookies are not used for maintaining valid sessions in iTrack Easy. The user's password is passed as a POST parameter over HTTPS using a base64 encoded passwd field on every request. In this …	CWE-384 Session Fixation	CVE-2016-6545	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266296	7.5	HIGH Network	ieasytec	itrack_easy	getgps data in iTrack Easy can be modified without authentication by setting the data using the parametercmd:setothergps. This vulnerability can be exploited to alter the GPS data of a lost device.	CWE-287 Improper Authentication	CVE-2016-6544	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266297	5.9	MEDIUM Network	ieasytec	itrack_easy	A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS data, which can allow unauthenticated parties to track the device.	CWE-284 Improper Access Control	CVE-2016-6543	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266298	3.7	LOW Network	ieasytec	itrackeasy	The iTrack device tracking ID number, also called "LosserID" in the web API, can be obtained by being in the range of an iTrack device. The tracker ID is the device's BLE MAC address.	CWE-20 Improper Input Validation	CVE-2016-6542	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266299	9.8	CRITICAL Network	shdesigns	resident_download_manager	SHDesigns' Resident Download Manager provides firmware update capabilities for Rabbit 2000/3000 CPU boards, which according to the reporter may be used in some industrial control and embedded applica…	CWE-20 Improper Input Validation	CVE-2016-6567	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

266300	8.1	HIGH Network	infinixauthority bluproducts xolo beeline iku-mobile leagoo doogee	hot_x507_firmware hot_2_x510_firmware zero_x506_firmware zero_2_x509_firmware studio_g_firmware studio_g_plus_firmware studio_6.0_hd_firmware studio_x_firmware studio_x_plus_f…	Android devices with code from Ragentek contain a privileged binary that performs over-the-air (OTA) update checks. Additionally, there are multiple techniques used to hide the execution of this bina…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-6564	2024-11-21 11:56	2018-07-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed